{"total":204,"rows":[{"id":"2110.05679","title":"Large Language Models Can Be Strong Differentially Private Learners","created":"2021-10-12","cited_by_count":412,"area":null},{"id":"2109.12298","title":"Opacus: User-Friendly Differential Privacy Library in PyTorch","created":"2021-09-25","cited_by_count":383,"area":null},{"id":"2204.13650","title":"Unlocking High-Accuracy Differentially Private Image Classification through Scale","created":"2022-04-28","cited_by_count":224,"area":null},{"id":"2101.04535","title":"Adversary Instantiation: Lower Bounds for Differentially Private Machine Learning","created":"2021-01-11","cited_by_count":199,"area":null},{"id":"2303.00654","title":"How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacy","created":"2023-03-01","cited_by_count":153,"area":null},{"id":"2201.04845","title":"Reconstructing Training Data with Informed Adversaries","created":"2022-01-13","cited_by_count":148,"area":null},{"id":"2111.08440","title":"On the Importance of Difficulty Calibration in Membership Inference Attacks","created":"2021-11-15","cited_by_count":147,"area":"safety"},{"id":"2102.06387","title":"The Distributed Discrete Gaussian Mechanism for Federated Learning with Secure Aggregation","created":"2021-02-12","cited_by_count":128,"area":null},{"id":"2305.08846","title":"Privacy Auditing with One (1) Training Run","created":"2023-05-15","cited_by_count":123,"area":null},{"id":"2210.09929","title":"Differentially Private Diffusion Models","created":"2022-10-18","cited_by_count":119,"area":"diffusion"},{"id":"2110.03620","title":"Hyperparameter Tuning with Renyi Differential Privacy","created":"2021-10-07","cited_by_count":104,"area":null},{"id":"2106.09352","title":"Large Scale Private Learning via Low-rank Reparametrization","created":"2021-06-17","cited_by_count":88,"area":null},{"id":"2102.12677","title":"Do Not Let Privacy Overbill Utility: Gradient Embedding Perturbation for Private Learning","created":"2021-02-25","cited_by_count":86,"area":null},{"id":"2110.04995","title":"The Skellam Mechanism for Differentially Private Federated Learning","created":"2021-10-11","cited_by_count":68,"area":null},{"id":"2205.13710","title":"Privacy of Noisy Stochastic Gradient Descent: More Iterations without More Privacy Loss","created":"2022-05-27","cited_by_count":61,"area":null},{"id":"2111.11343","title":"Decentralized Federated Learning through Proxy Model Sharing","created":"2021-11-22","cited_by_count":57,"area":null},{"id":"2210.03403","title":"TAN Without a Burn: Scaling Laws of DP-SGD","created":"2022-10-07","cited_by_count":52,"area":null},{"id":"2306.08153","title":"(Amplified) Banded Matrix Factorization: A unified approach to private training","created":"2023-06-13","cited_by_count":49,"area":null},{"id":"2203.05363","title":"Differentially Private Learning Needs Hidden State (Or Much Faster Convergence)","created":"2022-03-10","cited_by_count":48,"area":null},{"id":"2210.00036","title":"Differentially Private Bias-Term Fine-tuning of Foundation Models","created":"2022-09-30","cited_by_count":48,"area":null},{"id":"2201.12383","title":"Bounding Training Data Reconstruction in Private (Deep) Learning","created":"2022-01-28","cited_by_count":46,"area":null},{"id":"2210.00597","title":"Composition of Differential Privacy & Privacy Amplification by Subsampling","created":"2022-10-02","cited_by_count":45,"area":null},{"id":"2205.02973","title":"Large Scale Transfer Learning for Differentially Private Image Classification","created":"2022-05-06","cited_by_count":41,"area":null},{"id":"2202.05963","title":"Private Adaptive Optimization with Side Information","created":"2022-02-12","cited_by_count":38,"area":null},{"id":"2206.07902","title":"On Privacy and Personalization in Cross-Silo Federated Learning","created":"2022-06-16","cited_by_count":36,"area":null},{"id":"2206.13033","title":"Normalized/Clipped SGD with Perturbation for Differentially Private Non-Convex Optimization","created":"2022-06-27","cited_by_count":36,"area":null},{"id":"2211.04446","title":"Private Set Generation with Discriminative Information","created":"2022-11-07","cited_by_count":34,"area":null},{"id":"2202.07623","title":"Defending against Reconstruction Attacks with R\\'enyi Differential Privacy","created":"2022-02-15","cited_by_count":32,"area":null},{"id":"2103.11109","title":"DataLens: Scalable Privacy Preserving Training via Gradient Compression and Aggregation","created":"2021-03-20","cited_by_count":31,"area":null},{"id":"2206.07737","title":"Disparate Impact in Differential Privacy from Gradient Misalignment","created":"2022-06-15","cited_by_count":31,"area":null},{"id":"2312.14334","title":"DP-AdamBC: Your DP-Adam Is Actually DP-SGD (Unless You Apply Bias Correction)","created":"2023-12-21","cited_by_count":28,"area":null},{"id":"2403.09048","title":"Taming Cross-Domain Representation Variance in Federated Prototype Learning with Heterogeneous Data Domains","created":"2024-03-14","cited_by_count":28,"area":null},{"id":"2210.02912","title":"CANIFE: Crafting Canaries for Empirical Privacy Measurement in Federated Learning","created":"2022-10-06","cited_by_count":24,"area":null},{"id":"2404.00473","title":"Privacy Backdoors: Stealing Data with Corrupted Pretrained Models","created":"2024-03-30","cited_by_count":22,"area":null},{"id":"2110.06255","title":"Not all noise is accounted equally: How differentially private learning benefits from large sampling rates","created":"2021-10-12","cited_by_count":21,"area":null},{"id":"2303.17046","title":"Have it your way: Individualized Privacy Assignment for DP-SGD","created":"2023-03-29","cited_by_count":21,"area":null},{"id":"2102.12412","title":"Computing Differential Privacy Guarantees for Heterogeneous Compositions Using FFT","created":"2021-02-24","cited_by_count":20,"area":null},{"id":"2110.08557","title":"DPNAS: Neural Architecture Search for Deep Learning with Differential Privacy","created":"2021-10-16","cited_by_count":20,"area":null},{"id":"2206.02617","title":"Individual Privacy Accounting for Differentially Private Stochastic Gradient Descent","created":"2022-06-06","cited_by_count":20,"area":null},{"id":"2209.15596","title":"Individual Privacy Accounting with Gaussian Differential Privacy","created":"2022-09-30","cited_by_count":20,"area":null},{"id":"2301.09112","title":"Differentially Private Natural Language Models: Recent Advances and Future Directions","created":"2023-01-22","cited_by_count":20,"area":null},{"id":"2301.11989","title":"Practical Differentially Private Hyperparameter Tuning with Subsampling","created":"2023-01-27","cited_by_count":19,"area":null},{"id":"2212.00309","title":"Differentially Private Adaptive Optimization with Delayed Preconditioners","created":"2022-12-01","cited_by_count":18,"area":null},{"id":"2304.09762","title":"Practical Differentially Private and Byzantine-resilient Federated Learning","created":"2023-04-15","cited_by_count":18,"area":null},{"id":"2103.01294","title":"Wide Network Learning with Differential Privacy","created":"2021-03-01","cited_by_count":17,"area":null},{"id":"2209.08541","title":"Distribution inference risks: Identifying and mitigating sources of leakage","created":"2022-09-18","cited_by_count":17,"area":null},{"id":"2302.02589","title":"$z$-SignFedAvg: A Unified Stochastic Sign-based Compression for Federated Learning","created":"2023-02-06","cited_by_count":17,"area":null},{"id":"2302.02936","title":"Private GANs, Revisited","created":"2023-02-06","cited_by_count":17,"area":null},{"id":"2306.08842","title":"ViP: A Differentially Private Foundation Model for Computer Vision","created":"2023-06-15","cited_by_count":17,"area":null},{"id":"2310.15526","title":"Privacy Amplification for Matrix Mechanisms","created":"2023-10-24","cited_by_count":17,"area":null},{"id":"2105.05180","title":"On the Renyi Differential Privacy of the Shuffle Model","created":"2021-05-11","cited_by_count":16,"area":null},{"id":"2207.08988","title":"Training Large-Vocabulary Neural Language Models by Private Federated Learning for Resource-Constrained Devices","created":"2022-07-18","cited_by_count":16,"area":null},{"id":"2109.12062","title":"SGDE: Secure Generative Data Exchange for Cross-Silo Federated Learning","created":"2021-09-24","cited_by_count":15,"area":null},{"id":"2311.14632","title":"Differentially Private SGD Without Clipping Bias: An Error-Feedback Approach","created":"2023-11-24","cited_by_count":14,"area":null},{"id":"2210.09634","title":"DPIS: An Enhanced Mechanism for Differentially Private SGD with Importance Sampling","created":"2022-10-18","cited_by_count":13,"area":null},{"id":"2211.15893","title":"Adap DP-FL: Differentially Private Federated Learning with Adaptive Noise","created":"2022-11-29","cited_by_count":13,"area":null},{"id":"2305.05900","title":"DPMLBench: Holistic Evaluation of Differentially Private Machine Learning","created":"2023-05-10","cited_by_count":13,"area":null},{"id":"2305.10994","title":"Graphical vs. Deep Generative Models: Measuring the Impact of Differentially Private Mechanisms and Budgets on Utility","created":"2023-05-18","cited_by_count":13,"area":null},{"id":"2305.13209","title":"Faster Differentially Private Convex Optimization via Second-Order Methods","created":"2023-05-22","cited_by_count":13,"area":null},{"id":"2309.05505","title":"Share Your Representation Only: Guaranteed Improvement of the Privacy-Utility Tradeoff in Federated Learning","created":"2023-09-11","cited_by_count":13,"area":null},{"id":"2310.19973","title":"Unified Enhancement of Privacy Bounds for Mixture Mechanisms via $f$-Differential Privacy","created":"2023-10-30","cited_by_count":13,"area":null},{"id":"2311.12850","title":"PrivImage: Differentially Private Synthetic Image Generation using Diffusion Models with Semantic-Aware Pretraining","created":"2023-10-19","cited_by_count":13,"area":"diffusion"},{"id":"2405.20769","title":"Avoiding Pitfalls for Privacy Accounting of Subsampled Mechanisms under Composition","created":"2024-05-27","cited_by_count":13,"area":null},{"id":"2107.02586","title":"Differentially private federated deep learning for multi-site medical image segmentation","created":"2021-07-06","cited_by_count":12,"area":null},{"id":"2401.00583","title":"Improving the Privacy and Practicality of Objective Perturbation for Differentially Private Linear Learners","created":"2023-12-31","cited_by_count":12,"area":null},{"id":"2411.05818","title":"Open LLMs are Necessary for Current Private Adaptations and Outperform their Closed Alternatives","created":"2024-11-02","cited_by_count":12,"area":null},{"id":"2305.16202","title":"DP-SGD Without Clipping: The Lipschitz Neural Network Way","created":"2023-05-25","cited_by_count":11,"area":null},{"id":"2307.00310","title":"Gradients Look Alike: Sensitivity is Often Overestimated in DP-SGD","created":"2023-07-01","cited_by_count":11,"area":null},{"id":"2311.06888","title":"Preserving Node-level Privacy in Graph Neural Networks","created":"2023-11-12","cited_by_count":11,"area":null},{"id":"2402.03990","title":"Subsampling is not Magic: Why Large Batch Sizes Work for Differentially Private Stochastic Optimisation","created":"2024-02-06","cited_by_count":11,"area":null},{"id":"2503.14681","title":"DPImageBench: A Unified Benchmark for Differentially Private Image Synthesis","created":"2025-03-18","cited_by_count":11,"area":null},{"id":"2110.11688","title":"Differentially Private Coordinate Descent for Composite Empirical Risk Minimization","created":"2021-10-22","cited_by_count":10,"area":null},{"id":"2111.05454","title":"DP-REC: Private & Communication-Efficient Federated Learning","created":"2021-11-09","cited_by_count":10,"area":null},{"id":"2211.02956","title":"Privacy-Preserving Models for Legal Natural Language Processing","created":"2022-11-05","cited_by_count":10,"area":null},{"id":"2311.14056","title":"DPSUR: Accelerating Differentially Private Stochastic Gradient Descent Using Selective Update and Release","created":"2023-11-23","cited_by_count":10,"area":"safety"},{"id":"2308.12210","title":"ULDP-FL: Federated Learning with Across Silo User-Level Differential Privacy","created":"2023-08-23","cited_by_count":9,"area":null},{"id":"2309.07809","title":"Communication Efficient Private Federated Learning Using Dithering","created":"2023-09-14","cited_by_count":9,"area":null},{"id":"2401.16251","title":"Cross-silo Federated Learning with Record-level Personalized Differential Privacy","created":"2024-01-29","cited_by_count":9,"area":null},{"id":"2405.06368","title":"DP-DyLoRA: Fine-Tuning Transformer-Based Models On-Device under Differentially Private Federated Learning using Dynamic Low-Rank Adaptation","created":"2024-05-10","cited_by_count":9,"area":null},{"id":"2112.00845","title":"Improving Differentially Private SGD via Randomly Sparsified Gradients","created":"2021-12-01","cited_by_count":8,"area":null},{"id":"2408.10456","title":"Differentially Private Stochastic Gradient Descent with Fixed-Size Minibatches: Tighter RDP Guarantees with or without Replacement","created":"2024-08-19","cited_by_count":8,"area":null},{"id":"2410.01068","title":"Convergent Privacy Loss of Noisy-SGD without Convexity and Smoothness","created":"2024-10-01","cited_by_count":8,"area":null},{"id":"2508.03098","title":"Privacy-Aware Decoding: Mitigating Privacy Leakage of Large Language Models in Retrieval-Augmented Generation","created":"2025-08-05","cited_by_count":8,"area":"rag"},{"id":"2202.03758","title":"Practical Challenges in Differentially-Private Federated Survival Analysis of Medical Data","created":"2022-02-08","cited_by_count":7,"area":null},{"id":"2211.13403","title":"Differentially Private Image Classification from Features","created":"2022-11-24","cited_by_count":7,"area":null},{"id":"2212.04371","title":"Skellam Mixture Mechanism: a Novel Approach to Federated Learning with Differential Privacy","created":"2022-12-08","cited_by_count":7,"area":null},{"id":"2403.02571","title":"DPAdapter: Improving Differentially Private Deep Learning through Noise Tolerance Pre-training","created":"2024-03-05","cited_by_count":7,"area":null},{"id":"2411.05743","title":"Free Record-Level Privacy Risk Evaluation Through Artifact-Based Methods","created":"2024-11-08","cited_by_count":7,"area":"safety"},{"id":"2503.03043","title":"Leveraging Randomness in Model and Data Partitioning for Privacy Amplification","created":"2025-03-04","cited_by_count":7,"area":null},{"id":"2504.01395","title":"From Easy to Hard: Building a Shortcut for Differentially Private Image Synthesis","created":"2025-04-02","cited_by_count":7,"area":"diffusion"},{"id":"2101.02997","title":"Differentially Private Federated Learning for Cancer Prediction","created":"2021-01-08","cited_by_count":6,"area":null},{"id":"2103.00342","title":"Constrained Differentially Private Federated Learning for Low-bandwidth Devices","created":"2021-02-27","cited_by_count":6,"area":null},{"id":"2107.08461","title":"Differentially Private Bayesian Neural Networks on Accuracy, Privacy and Reliability","created":"2021-07-18","cited_by_count":6,"area":null},{"id":"2107.08763","title":"Renyi Differential Privacy of the Subsampled Shuffle Model in Distributed Learning","created":"2021-07-19","cited_by_count":6,"area":null},{"id":"2111.14838","title":"Evaluating Privacy-Preserving Machine Learning in Critical Infrastructures: A Case Study on Time-Series Classification","created":"2021-11-29","cited_by_count":6,"area":null},{"id":"2306.08656","title":"Augment then Smooth: Reconciling Differential Privacy with Certified Robustness","created":"2023-06-14","cited_by_count":6,"area":null},{"id":"2307.13231","title":"Spectral-DP: Differentially Private Deep Learning through Spectral Perturbation and Filtering","created":"2023-07-25","cited_by_count":6,"area":null},{"id":"2307.15017","title":"Samplable Anonymous Aggregation for Private Federated Data Analysis","created":"2023-07-27","cited_by_count":6,"area":null},{"id":"2308.07553","title":"Enhancing the Antidote: Improved Pointwise Certifications against Poisoning Attacks","created":"2023-08-15","cited_by_count":6,"area":null},{"id":"2407.05237","title":"Privacy of the last iterate in cyclically-sampled DP-SGD on nonconvex composite losses","created":"2024-07-07","cited_by_count":6,"area":null}],"next_cursor":"100"}